UNITEDSTATESDISTRICTCOURT

FOR

THEEASTERNDISTRICTOF

VIRGH

Alexandria

Division

UNITEDSTATES

OFAMERICA,

V

E

AAs—

 

'i•''

r:

 .

2

 IB

CriminalNo:1:16-mj-406

ANDREW

OTTOBOGGS

(a/k/a INCURSIO )

&

JUSTIN

GRAY

LIVERMAN

 a/k/a D3F4ULT )

Defendants.

UNDERSEALAFFIDAVITINSUPPORT

OF

A

CRIMINALCOMPLAINT

AND

ARRESTWARRANTS

I,BJKang,beingfirstdulysworn,herebydeposeandstateasfollows:1.IamaSpecialAgentwiththeFederalBureau

of

Investigation(FBI)

assignedtotheWashingtonFieldOffice( WFO )»Washington,D.C.Ihavebeen

employedbytheFBIasaSpecialAgentsince2005.DuringthattimeIhaveparticipated

innumerousinvestigations

of

fraudrelatingtothesecuritiesmarkets,includingmarketmanipulation,insidertrading,andPonzischemes,andIhaveconductedorparticipatedin

arrests,execution

of

searchwarrants,surveillance,debriefings

of

informants,andreviews

of

tapedconversationsandsecuritiestradingrecords.Iamcurrentlyassignedtothecriminalcomputerintrusionsquad

of

theFBIWFOwhereIinvestigatecrimesinvolvingcomputerintrusions.PriortomyassignmenttoWFO,IwasaSupervisorySpecialAgent

atFBICyberHeadquarters,whereIprovidedsupporttofinancially-motivatedcyber

intrusioninvestigations.Ihavealsoreceivedtrainingincybercrimeinvestigation

 j

Case 1:16-mj-00406-MSN Document 2 Filed 09/02/16 Page 1 of 37 PageID# 2

 

techniques,computerevidenceidentification,andanalyzingandtracingdigitalcurrency.

AsaSpecialAgent

of

theFBI,Iamauthorizedtoinvestigatecrimesinvolvingfraud,

computerintrusion,andothercrimesstatedunderfederallaw,includingTitle18

of

the

UnitedStates

Code

2.Imakethisaffidavitinsupport

of

anapplicationforacriminalcomplaint

charging

ANDREW

OTTOBOGGS(alsoknownas INCURSIO )andJUSTINGRAY

LIVERMAN(alsoknownas D3F4ULT )withconspiringtoviolatenumerousfederallawsasprohibitedby18U.S.C.§371.Asdescribedinmoredetailbelow,BOGGSand

LIVERMANknowinglyandwillfullyconspiredtoviolatemultiplefederallaws,including18U.S.C.§912(Falsepersonation

of

officeroremployee

of

theUnited

States);18U.S.C.§1028A(AggravatedIdentityTheft);18U.S.C.§§1030(a)(2)(B),(C)

 (a)(3)(Fraudandrelatedactivityinconnectionwithcomputers);18U.S.C.§1038

(Falseinformationandhoaxes);and47U.S.C.§223(Harassingtelephonecalls).

3.Thefactsinthisaffidavitcomefrommypersonalobservations,review

of

documentsandaudiorecordingslawfullyobtained,informationobtainedfromother

agentsandwitnesses,andmytrainingandexperience.Becausethisaffidavitisforthe

limitedpurpose

of

establishingprobablecauseforacriminalcomplaint,itdoesnotsetfortheveryfactlearnedinthecourse

of

thisinvestigation.

The

Defendants

and

Co Conspirators

4

Defendant

ANDREWOTTOBOGGS

andothermembers

 

the

Conspiracynotchargedhereinweremembers

of

aConspiracythatreferredtoitselfas

 CrackasWithAttitude or CWA. ThegrouptargetedthepersonalInternetaccounts

of

seniorU.S.Governmentofficialsforhackingoffenses.

Case 1:16-mj-00406-MSN Document 2 Filed 09/02/16 Page 2 of 37 PageID# 3

 

5.DefendantJUSTINGRAYLIVERMANjoinedtheConspiracytotargetcertainseniorU.S.Governmentofficialsforhackingoffenses.6.Othermembers

of

theConspiracy,notchargedherein,includethe

followingindividualsbasedintheUnitedKingdom:(1)anidentified17-year-oldmaleknownas CRACKA, (2)anidentified17-year-oldmaleknownas DERP, and(3)an

identified15-year-oldmaleknownas CUBED.

7.Themembers

of

theConspiracyutilizedanonymizingsoftware,Twitter,

andothersocialmediaplatforms,andinstantmessagingapplicationstocommunicate

withoneanother,toobtainunlawfulaccesstoonlineaccounts,publicizetheirexploits,andharasstheirvictims.Themembers

of

theConspiracy

uti ze

thefollowingTwitter

handles,amongothers:

NameTwitter

ScreenNames

JUSTINLIVERM N

@D3F4ULT

@BASHTIEN

@SH1N0D4

 NDREW

 OGGS

@INCURSIOSUBTER@GENUINELYSPOOKY

CR CK

@PORNGOD

@PHPHAX

@D1CKREJECT

DERP

@DERPLAUGHING

 U ED

@FRUITYHAX

8.TheConspiracyutilizedatechniqueknownas socialengineering,

accessedandattemptedtoaccessvictims onlinecomputeraccountswithout

authorization,obtainedpersonalinformation,andpostedthatinformationontheInternet

forthepurpose

of

harassingthevictims.TheConspiracyspecificallytargetedaccounts

Case 1:16-mj-00406-MSN Document 2 Filed 09/02/16 Page 3 of 37 PageID# 4